Security · GitHub

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104 (100%) on the XBOW validation benchmarks, powered by Kimi K3.

Mugshot — unlock sudo on macOS with your face. Local Face ID style recognition, no cloud.

MPyC: Multiparty Computation in Python

Windows-native full-disk search: file names, document contents, and text inside screenshots. Acrylic command palette on Alt+`. Rust · tantivy · Tauri. 本地全盘搜索：文件名、文档内容、截图文字。

• 🔍 File name search - Instant, as you type
• 📄 Document content search - Plain text, Markdown, code, and document formats (PDF, Word, Excel, PowerPoint)

wafw00f's fingerprints. Go speed. Pipeline-native. WAF detection from live HTTP and offline captures.

Graphical Web interface developed to facilitate the use of security information tools.

Reverse Shell as a Service

AWESOME-Azure-Architecture - https://aka.ms/AwesomeAzureArchitecture

完全免费 · 开源 · 数据自主的极简记账工具

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

Local-first code audit workbench for Opengrep. Scan locally, track findings across versions, verify fixes, and produce reproducible security audit reports.

🎯 Pi 5 Wardriving & Wireless Pentest Platform | WiFi/BLE/SDR Attacks | WPA3 • Evil Twin • Karma • Evilginx | GPS Mapping | Cloud Cracking | Part of MoMo Ecosystem

Comprehensive, data-driven security assessment checklists across 23 platforms web, API, mobile, cloud, Active Directory, Kubernetes, LLM, and more. Expandable hierarchy, global search, progress tracking, export.

• Hierarchical checklist — content is organised in four levels, Platform → Category → Technology → Check, so the tool works like a real assessment framework rather than a flat list. Expand/collapse categories and technologies, with item counts on every section and one-click Expand all / Collapse all.
• Global search — press ⌘K / Ctrl+K from any page to search across platforms, categories, technologies, checks, descriptions, tags, tools, and references. Selecting a result jumps to it, auto-expands the right sections, and highlights the item.

Fully featured, open source, Fair-code, privacy-friendly email app for Android

• 100% open source
• Privacy oriented

Simple random DNS, HTTP/S internet traffic noise generator in a Docker container

• Crawls up to 10,000 top sites sourced from CrUX top lists, refreshed monthly.
• Fetches and rotates real User-Agent strings weekly from useragents.me.

LotL RMM

• Fast Astro-powered static site at lolrmm.io – browse the catalog, filter by platform, search by name/domain/artifact, and explore tool details. Catalog content is rendered as static HTML; interactive search and filters use JavaScript
• Catalog snapshot (2026-10-06): 358 entries classified as 261 RMM and 97 RAT, 724 distinct recorded domain patterns, and 145 tools with certificate evidence. See the live site for current totals; catalog classification alone does not establish malicious use

A curated list for Awesome Kubernetes Security resources